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NATIONAL FOREWORD 

This Indian Standard (Sixth Revision) which is identical with ISO 9004 : 2009 'Managing for the sustained 
success of an organization — A quality management approach' issued by the International Organization for 
Standardization (ISO) was adopted by the Bureau of Indian Standards on the recommendation of the Ouality 
Management Sectional Committee and approval of the Management and Systems Division Council. 

This standard was first published in 1982 and subsequently revised in 1987,1989,1991,1994 and 2000. In 
this revision Managing for the sustained success of an organization is a major change. The title has also 
been modified to reflect the change in focus towards sustainability through quality management approach. 
The sixth revision of this standard cancels and replaces the fifth revision published in 2000. 

The text of the ISO Standard has been approved as suitable for publication as an Indian Standard without 
deviations. Certain conventions are, however, not identical to those used in Indian Standards. Attention is 
particularly drawn to the following: 

Wherever the words 'International Standard' appear referring to this standard, they should be read as 
'Indian Standard'. 

In this adopted standard, reference appears to the following International Standard for which Indian Standard 
also exists. The corresponding Indian Standard which is to be substituted in its place is given below along 
with its degree of equivalence for the edition indicated: 

International Standard Corresponding Indian Standard Degree of Equivalence 

ISO 9000:2005 Ouality management IS/ISO 9000 : 2005 Ouality Identical 

systems — Fundamentals and management systems — Fundamentals 

vocabulary and vocabulary (third revision) 
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Introduction 

This international Standard provides guidance to support the achievement of sustained success for any 
organization in a complex, demanding, and ever-changing environment, by a quality management approach. 

The sustained success of an organization is achieved by its ability to meet the needs and expectations of its 
customers and other interested parties, over the long term and in a balanced way. Sustained success can be 
achieved by the effective management of the organization, through awareness of the organization's 
environment, by learning, and by the appropriate application of either improvements, or innovations, or both. 

This International Standard promotes self-assessment as an important tool for the review of the maturity level 
of the organization, covering its leadership, strategy, management system, resources and processes, to identify 
areas of strength and weakness and opportunities for either improvements, or innovations, or both. 

This International Standard provides a wider focus on quality management than ISO 9001 ; it addresses the 
needs and expectations of all relevant interested parties and provides guidance for the systematic and 
continual improvement of the organization's overall performance. An extended model of a process-based 
quality management system incorporating the elements of ISO 9001 and ISO 9004 is given in Figure 1 . 
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Figure 1 — Extended inodel of a process-based quality management system 
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This International Standard has been developed to maintain consistency with ISO 9001 and be compatible with 
other management system standards. Such standards complement each other, but can also be used 
independently. 

Annex A provides a tool for organizations to self-assess their own strengths and weaknesses, to determine 
their level of maturity, and to identify opportunities for improvement and innovation. 

Annex B provides a description of the quality management principles that are the basis of the quality 
management standards prepared by ISO/TC 176. 

Annex C gives a clause by clause correspondence between ISO 9001 :2008 and this International Standard. 
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Indian Standard 

MANAGING FOR THE SUSTAINED 

SUCCESS OF AN ORGANIZATION — A QUALITY 

MANAGEMENT APPROACH 

( Sixth Revision ) 

1 Scope 

This International Standard provides guidance to organizations to support the achievement of sustained 
success by a quality management approach. It is applicable to any organization, regardless of size, type and 
activity. 

This International Standard is not intended for certification, regulatory or contractual use. 



2 Normative references 

the following referenced documents relate to the application of this document. For dated references, only the 
edition cited applies. For undated references, the latest edition of the referenced document (including any 
amendments) applies. 

ISO 9000, Quality management systems — Fundamentals and vocabulary 



3 Terms and definitions 

For the purposes of this document, the terms and definitions given in ISO 9000 and the following apply. 

3.1 

sustained success 

(organization) result of the ability of an organization to achieve and maintain its objectives in the long term 

3.2 

organization's environment 

combination of internal and external factors and conditions that can affect the achievement of an organization's 
objectives and its behaviour towards its interested parties 

4 Managing for the sustained success of an organization 

4.1 General 

To achieve sustained success, top management should adopt a quality management approach. The 
organization's quality management system should be based on the principles described in Annex B. These 
principles describe concepts that are the foundation of an effective quality management system. To achieve 
sustained success, top management should apply these principles to the organization's quality management 
system. 

The organization should develop the organization's quality management system to ensure 

— the efficient use of resources. 
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— decision malting based on factual evidence, and 

— focus on customer satisfaction, as well as on the needs and expectations of other relevant interested parties. 

NOTE In this International Standard, the term "top management" refers to the highest level of decision making 
authority in an organization and the term "the organization" covers all people in an organization. This is 
consistent with the definitions of these terms given in ISO 9000. 

4.2 Sustained success 

The organization can achieve sustained success by consistently meeting the needs and expectations of its 
interested parties, in a balanced way. over the long term. 

An organization's environment is ever-changing and uncertain, and to achieve sustained success its top 
management should 

— have a long-term planning perspective, 

— constantly monitor and regularly analyse the organization's environment, 

— identify all its relevant interested parties, assess their individual potential impacts on the organization's 
performance, as well as determining how to meet their needs and expectations in a balanced way, 

— continually engage interested parties and keep them informed of the organization's activities and plans, 

— establish mutually beneficial relationships with suppliers, partners and other interested parties, 

— make use of a wide variety of approaches, including negotiation and mediation, to balance the often 
competing needs and expectations of interested parties, 

— identify associated short and long-term risks and deploy an overall strategy for the organization to mitigate 
them, 

— anticipate future resource needs (including the competences required of its people), 

— establish processes appropriate to achieving the organization's strategy, ensuring that they are capable of 
responding quickly to changing circumstances, 

— regularly assess compliance with current plans and procedures, and take appropriate corrective and 
preventive actions. 

— ensure that people in the organization have opportunities for learning for their own benefit, as well as for 
maintaining the vitality of the organization, and 

— establish and maintain processes for innovation and continual improvement. 

4.3 The organization's environment 

An organization's environment will be undergoing change continually, regardless of its size (large or small), its 
activities and products, or its type (for profit or not-for-profit); consequently this should be monitored constantly by 
the organization. Such monitoring should enable the organization to identify, assess and manage the risks 
related to interested parties, and their changing needs and expectations. 

Top management should make decisions for organizational change and innovation in a timely manner in order to 
maintain and improve the organization's performance. 

NOTE For more information on risk management, see ISO 31000. 
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4.4 Interested parties, needs and expectations 

Interested parties are individuals and other entities that add value to the organization, or are otherwise interested 
in, or affected by, the activities .of the organization. Meeting the needs and expectations of interested parties 
contributes to the achievement of sustained success by the organization. 

In addition, the needs and expectations of individual interested parties are different, can be in conflict with those 
of other interested parties, or can change very quickly. The means by which the needs and expectations of 
interested parties are expressed and met can take a wide variety of forms, including collaboration, cooperation, 
negotiation, outsourcing, or by terminating an activity. 

Table 1 — Examples of interested parties and their needs and expectations 



Interested party 


Needs and expectations 


Customers 


Quality, price and delivery performance of products 


Owne rs/shareholders 


Sustained profitability 
Transparency 


People in the organization 


Good work environment 
Job security Recognition 
and reward 


Suppliers and partners 


Mutual benefits arid continuity 


Society 


Environmental protection 

Ethical behaviour 

Compliance with statutory and regulatory requirements 



NOTE Although most organizations use similar descriptions for their interested parties (e.g. customers, 
owners/shareholders, suppliers and partners, people in the organization), the composition of those categories can differ 
significantly over time and between organizations, industries, nations and cultures. 



5 Strategy and policy 

5.1 General 

To achieve sustained success, top management should establish and maintain a mission, a vision and values for 
the organization. These should be clearly understood, accepted and supported by people in the organization and, 
as appropriate, by other interested parties. 

NOTE In this International Standard, a "mission" is a description of why the organization exists, and a "vision" 

describes its desired state, i.e. what the organization wants to be and how it wants to be seen by its interested parties. 



5.2 Strategy and policy formulation 

Top management should set out the organization's strategy and policies clearly, in order to get the mission, 
vision and values accepted and supported by its interested parties. The organization's environment should be 
regularly monitored to determine if there is a need to review and (when appropriate) revise the strategy and 
policies. In order to establish, adopt and sustain an effective strategy and policy, the organization should have 
processes to 

— continually monitor and regularly analyse the organization's environment, including its customers' needs 
and expectations, the competitive situation, new technologies, political changes, economic forecasts, or 
sociological factors, 

— identify and determine the needs and expectations of other interested parties 
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— assess its current process capabilities and resources, 

— identify future resource and technology needs, 

— update its strategy and policies, and 

— identify the outputs necessary to meet the needs and expectations of the interested parties. 

These processes should be established in a timely manner, with any necessary plans and resources being 
provided to support them. 

The formulation of an organization's strategy should also consider activities such as analyses of customer or 
regulatory demands, its products, its strengths, weaknesses, opportunities, and threats. A defined process 
should exist for the formulation and review of the organization's strategy. 

NOTE A "strategy" means a logically structured plan or method for achieving objectives, especially over a long period of 
time. 

5.3 Strategy and policy deployment 

5.3.1 General 

To implement a strategy and policies for sustained success, the organization should establish and maintain 
processes and practices that 

— translate its strategy and policies into measurable objectives for all relevant levels of the organization, as 
appropriate, 

— establish timelines for each objective and assign responsibility and authority for achieving the objective, 

— evaluate strategic risks and define adequate counter measures, 

— provide the resources required to deploy needed activities, and 

— execute the activities needed to achieve these objectives. 

5.3.2 Processes and practices 

In order to ensure that its processes and practices are effective and efficient, the organization should perform 
activities for 

— anticipating any potential conflicts arising from the different needs and expectations of its interested 
parties, 

— assessing and understanding the organization's current performance and the root-causes of problems in 
the past, in order to avoid their recurrence, 

— keeping interested parties informed, gaining their commitment, keeping them aware of progress against 
plans, and obtaining feedback and ideas for improvement from them, 

— reviewing the management system and its processes, and updating them as necessary, 

— monitoring, measuring, analysing, reviewing and reporting, 

— providing any required resources, including those for improvement, innovation and learning. 
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— the development, updating and accomplishment of its objectives, including defining timeframes for their 
achievement, and 

— ensuring that the results are consistent with the strategy. 
5.3.3 Deployment 

To deploy its strategy and policies, the organization should identify the relationships between its processes. A 
description of the sequence and interaction of the processes can assist review activities by 

— showing the relationship between organizational structures, systems and processes, 

— identifying potential problems in the interactions between processes, 

— providing a means for prioritizing improvement and other change initiatives, and 

— providing a framework for setting, aligning and deploying objectives to all relevant levels of the 
organization. 

5.4 Strategy and policy communication 

The effective communication of the strategy and policies is essential to the sustained success of the 
organization. 

Such communication should be meaningful, timely and continual. Communication should also include a 
feedback mechanism, a review cycle and should incorporate provisions to proactively address changes in the 
organization's environment. 

The organization's communication process should operate both vertically and horizontally and should be 
tailored to the differing needs of its recipients. For example, the same information can be conveyed differently 
to people within the organization than to customers or other interested parties. 



6 Resource management 

6.1 General 

The organization should identify the internal and external resources that are needed for the achievement of the 
organization's objectives in the short and long term. The organization's policies and methods for resource 
management should be consistent with its strategy. 

To ensure that resources (such as equipment, facilities, materials, energy, knowledge, finance and people) are 
used effectively and efficiently, it is necessary to have processes in place to provide, allocate, monitor, 
evaluate, optimize, maintain and protect those resources. 

To ensure the availability of the resources for future activities, the organization should identify and assess the 
risks of potential scarcity, and continually monitor current use of resources to find opportunities for improvement 
of their use. In parallel, research for new resources, optimized processes and new technologies 
should take place. 

The organization should periodically review the availability and suitability of the identified resources, including 
outsourced resources, and take action as necessary. The results of these reviews should also be used as 
inputs into the organization's reviews of its strategy, objectives and plans. 
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6.2 Financial resources 

Top management should determine the organization's financial needs and establish the necessary financial 
resources for current and future operations. Financial resources can take many different forms such'as cash, 
securities, loans or other financial instruments. 

The organization should establish and maintain processes for monitoring, controlling and reporting the effective 
allocation and efficient usage of financial resources related to the organization's objectives. 

Reporting of such matters can also provide means for determining ineffective or inefficient activities, and 
initiating suitable improvement actions. Financial reporting of activities related to the performance of the 
management system and product conformity should be used in management reviews. 

Improving the effectiveness and efficiency of the management system can positively influence the financial 
results of the organization in many ways. Examples include 

— internally, by reducing process and product failures and eliminating the waste of materials or time, and 

— externally, by reducing product failures, costs of compensation under guarantees and warranties, product 
liabilities and other legal exposure, costs of lost customers and markets. 

NOTE ISO 1 0014 provides examples of how an organization can identify and obtain financial and economic benefits from 

the application of the ISO 9000 quality management principles. 

6.3 Peopie in thie organization 

6.3.1 lUlanagement of people 

People are a significant resource of an organization and their full involvement enhances their ability to create 
value for interested parties. Top management should, through its leadership, create and maintain a shared 
vision, shared values and an internal environment in which people can become fully involved in achieving the 
organization's objectives. 

As people are a most valuable and critical resource, it is necessary to ensure that their work environment 
encourages personal growth, learning, knowledge transfer and teamwork. People management should be 
performed through a planned, transparent, ethical and socially responsible approach. The organization should 
ensure that the people understand the importance of their contribution and roles. 

The organization should establish processes that empower people to 

— translate the organization's strategic and process objectives into individual job objectives, and to establish 
plans for their achievement, 

— identify constraints to their performance, 

— take ownership and responsibility to solve problems, 

— assess personal performance against individual job objectives, 

— actively seek opportunities to enhance their competence and experience, 

— promote teamwork and encourage synergy between people, and 

— share information, knowledge and experience within the organization. 
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6.3.2 Competence of people 

In order to ensure that it has the necessary competences, the organization should establish and maintain a "people 
development plan" and associated processes; these should assist the organization in identifying, developing and 
improving the competence of its people through the following steps 

— identifying the professional and personal competences the organization could need in the short and long term, 
in accordance with its mission, vision, strategy, policies, and objectives, 

— identifying the competences currently available in the organization and the gaps between what is available and 
what is currently needed and could be needed in the future, 

— implementing actions to improve and/or acquire competences to close the gaps, 

— reviewing and evaluating the effectiveness of actions taken to ensure that the necessary competences have 
been acquired, and 

— maintaining competences that have been acquired. 
NOTE See ISO 1 001 5 for further guidance on competence and training. 

6.3.3 Involvement and motivation of people 

The organization should motivate people to understand the significance and importance of their responsibilities and 
activities in relation to the creation and provision of value for the customers and other interested parties. 

To enhance the involvement and motivation of its people, the organization should consider activities such as 

— developing a process to share knowledge and use the competence of people, e.g. a scheme for collecting 
ideas for improvement, 

— introducing an appropriate recognition and reward system, that is based on individual evaluations of the 
accomplishments of the people, 

— establishing a skills qualification system and career planning, to promote personal development. 

— continually reviewing the level of satisfaction and needs and expectations of people, and 

— providing opportunities for mentoring and coaching. 

NOTE For more information about the "involvement of people", see the related quality management principle in 
Annex B. 

6.4 Suppliers and partners 

6.4.1 General 

Partners can be suppliers of products, service providers, technological and financial institutions, governmental and 
non-governmental organizations or other interested parties. Partners can contribute with any type of resource, as 
agreed and defined in a partnership agreement. 

> The organization and its partners are interdependent and a mutually beneficial relationship enhances their 



J 



capabilities to create value. The organization should consider partnership as a specific form of relationship with 
suppliers, where suppliers can invest in and share the profits or losses of the organization's area of activity. 
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When an organization is developing partnerships, the organization should give consideration to issues such as 

— the provision of information to partners, as appropriate, to maximize their contributions, 

— supporting partners, in terms of providing them with resources (such as information, knowledge, expertise, 
technology, processes, and shared training), 

— the sharing of profits and losses with partners, and 

— improving the performance of partners. 

NOTE For more information about "mutually beneficial relationships", see the related quality management 
principle in Annex B. 

6.4.2 Selection, evaluation and improvement of the capabilities of suppliers and partners 

The organization should establish and- maintain processes to identify, select, and evaluate its suppliers and 
partners, in order to continually improve their capabilities and to ensure that the products or other resources they 
provide meet the needs and expectations of the organization. 

In selecting and evaluating suppliers and partners, the organization should consider issues such as 

— their contribution to the organization's activities and ability to create value for the organization and its 
interested parties, 

— the potential for continually improving their capabilities, 

— the enhancement of its own capabilities that can be achieved through co-operation with the suppliers and 
partners, and 

— the risks associated in the relationships with the suppliers and partners. 

Together with its suppliers and partners, the organization should seek to continually improve the quality, price and 
delivery of products provided by the suppliers and partners, and the effectiveness of their management systems, 
based on periodic evaluation and feedback of their performance. 

The organization should continually review and strengthen its relationships with its suppliers and partners, while 
considering the balance between its short- and long-term objectives. 

6.5 Infrastructure 

The organization should plan, provide and manage its infrastructure effectively and efficiently. It should 
periodically assess the suitability of the infrastructure to meet organizational objectives. Appropriate consideration 
should be given to 

— the dependability of the infrastructure (including consideration of availability, reliability, maintainability, 
and maintenance support), 

— safety and security, 

— infrastructure elements related to products and processes, 

— the efficiency, cost, capacity and work environment, and 

— the impact of the infrastructure on the work environment. 
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The organization sliould identify and assess the risl<s associated with the infrastructure and take action to 
mitigate the risl^s, including the establishment of adequate contingency plans. 

NOTE For more information about environmental impacts, see ISO 14001 and other standards prepared by 
ISO/TC 207. 

6.6 Work environment 

The organization should provide and manage a suitable work environment to achieve and maintain the sustained 
success of the organization and the competitiveness of its products. A suitable work environment, as a 
combination of human and physical factors, should include consideration of 

— creative work methods and opportunities for greater involvement to realize the potential of people in the 
organization, 

— safety rules and guidance and the use of protective equipment, 

— ergonomics, 

— psychological factors, including workload and stress, 

— workplace location, 

— facilities for people in the organization, 

— maximization of efficiency and minimization of waste, 

— heat, humidity, light, airflow, and 

— hygiene, cleanliness, noise, vibration and pollution. 

The work environment should encourage productivity, creativity and well-being for the people who are working in 
or visiting the organization's premises (e.g. customers, suppliers, and partners). At the same time, the 
organization should ensure that its work environment complies with applicable statutory and regulatory 
requirements and addresses applicable standards (such as those for environmental and occupational health and 
safety management). 

6.7 Knowledge, information and technology 

6.7.1 General 

The organization should establish and maintain processes to manage knowledge, information and technology as 
essential resources. The processes should address how to identify, obtain, maintain, protect, use and evaluate 
the need for these resources. The organization should share such knowledge, information and technology with its 
interested parties, as appropriate. 

6.7.2 Knowledge 

Top management should assess how the organization's current knowledge base is identified and protected. Top 
management should also consider how to obtain the knowledge required to meet the present and future needs of 
the organization from internal and external sources, such as academic and professional institutions. There are 
many Issues to consider when defining how to identify, maintain and protect knowledge, such as 

— learning from failures, near miss situations and successes, 

— capturing the knowledge and experience of people in the organization. 
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— gathering knowledge from customers, suppliers and partners, 

— capturing undocumented knowledge (tacit and explicit) that exists within the organization, 

— ensuring the effective communication of important information content (particularly at each interface in the 
supply and production chains), and 

— managing data and records. 

6.7.3 Information 

The organization should establish and maintain processes to gather reliable and useful data and for 
converting such data into the information necessary for decision making. 

This includes the processes needed for the storage, security, protection, communication and distribution of data 
and information to all relevant parties. The organization's information and communication systems need to be 
robust and accessible, to ensure their capabilities. The organization should ensure the integrity, confidentiality and 
availability of information relating to its performance, process improvements, and on progress towards the 
achievement of sustained success. 

6.7.4 Technology 

Top management should consider technological options to enhance the organization's performance in areas such 
as product realization, marketing, benchmarking, customer interaction, supplier relations and outsourced 
processes. The organization should establish processes for the assessment of 

— the current levels of technology inside and outside the organization, including emerging trends. 

— economic costs and benefits, 

— the evaluation of risks related to changes in technology, 

— the competitive environment, and 

— its speed and ability to react to customer requirements promptly, to ensure that it remains competitive. 

MOTE For more information on how to protect knowledge, see ISO/IEC 27000 and other standards prepared 
by ISO/JTC 1/SC 27 on information technology security techniques. 

6.8 Natural resources 

The availability of natural resources is one of the factors that can influence an organization's sustained success 
and ability to meet the requirements of its customers and other interested parties. The organization should 
consider the risks and opportunities related to the availability and use of energy and natural resources in the short 
and long term. 

The organization should give appropriate consideration to the integration of environmental protection aspects into 

product design and development, as well as to the development of its processes to mitigate identified 

risks. 

The organization should seek to minimize environmental impacts over the full life cycle of its products and its 
infrastructure, from design, through manufacturing or service delivery, to product distribution, use and disposal. 

NOTE For more information, see ISO 14001 and other standards prepared by.lSO/TC207 on environmental 
management. 
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7 Process management 

7.1 General 

Processes are specific to an organization and vary depending on the type, size and level of maturity of the 
organization. The activities within each process should be determined and adapted to the size and distinctive 
features of the organization. 

The organization should ensure the proactive management of all processes, including outsourced processes, to 
ensure that they are effective and efficient, in order to achieve its objectives. This can be facilitated by adopting a 
"process approach" that includes establishing processes, interdependencies, constraints and 
shared resources. 

Processes and their interrelationships should be reviewed on a regular basis and suitable actions should be 
taken for their Improvement. 

The processes should be managed as a system by creating and understanding the networks of processes, their 
sequences and interactions. The consistent operation of this system is often referred to as the "systems approach 
to management". The network can be described in a map of the processes and their interfaces. 

NOTE For further information on the "process approach", see the related quality management principle in Annex 

B of this International Standard, as well as ISO 9000 and the ISO 9000 "Introduction and Support Package" 

document 

Guidance on the Concept and Use of the Process Approach for management systems '^''' 

7.2 Process planning and control 

The organization should determine and plan its processes and define the functions that are necessary for 
providing products that can continue to meet the needs and expectations of customers and other interested 
parties, on an ongoing basis. Processes should be planned and controlled to be in accordance with the 
organization's strategy and should address management activities, provision of resources, product realization, 
monitoring, measurement and reviewing activities. 

tn the planning and control of processes, consideration should be given to 

— analyses of the organization's environment, 

— short- and long-term forecasts of market developments, 

— the needs and expectations of the interested parties, 

— objectives to be achieved. 

— statutory and regulatory requirements, 

— potential financial and other risks, 

— process inputs and outputs, 

— interactions with other processes, 

— resources and information, 

— activities and methods, 

— records that are required or desired, 

— measurement, monitoring and analysis, 
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— corrective and preventive actions, and 

— improvement and/or innovation activities. 

Process planning should include consideration of the determined needs for the organization to develop or acquire 
new technologies, or develop new products or product features, for added value. 

7.3 Process responsibility and authiority 

For each process, the organization should appoint a process manager (often referred to as the "process owner") 
with defined responsibilities and authorities to establish, maintain, control and improve the process and its 
interaction with other processes. The process manager could be a person or a team, depending on the nature of 
the process and the organization's culture. 

The organization should ensure that the responsibilities, authorities and roles of process managers are 
recognized throughout the organization, and that the people associated with the individual processes have the 
competences needed for the tasks and activities involved. 

8 Monitoring, measurement, analysis and review 

8.1 General 

To achieve sustained success in an ever-changing and uncertain environment, it is necessary for the organization 
to regularly monitor, measure, analyse and review its performance. 

8.2 Monitoring 

Top management should establish and maintain processes for monitoring the organization's environment, and for 
collecting and managing the information that is necessary for 

— identifying and understanding the present and future needs and expectations of all relevant interested 
parties, 

— assessing strengths, weaknesses, opportunities and threats, 

— determining the need for alternative, competitive or new product offerings, 

— evaluating current and emerging markets and technologies, 

— anticipating current and expected changes in statutory and regulatory requirements, 

— understanding the labour market and its effect on the loyalty of people in the organization, 

— understanding the social, economic, ecological trends and local cultural aspects relevant to the organization's 
activities, 

— determining the need for natural resources, and their protection over the long term, and 

— assessing current organizational and process capabilities (see Annex A). 

NOTE For more information about "customer focus", see the related quality management principle in Annex B. 
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8.3 Measurement 

8.3.1 General 

Top management should assess progress in achieving planned results against the mission, vision, policies 
strategies and objectives, at all levels and in all relevant processes and functions in the organization. A 
measurement and analysis process should be used to monitor this progress, to gather and provide the 
information necessary for performance evaluations and effective decision making. The selection of appropriate 
key performance indicators and monitoring methodology is critical for success of the measurement and analysis 
process. 

The methods used for collecting information regarding key performance indicators should be practicable and 
appropriate to the organization. Typical examples include 

— risk assessments and risk controls, 

— interviews, questionnaires and surveys on customer and other interested parties' satisfaction, 

— benchmarking, 

— performance reviews, including suppliers and partners, and 

— monitoring and recording of process variables and product characteristics. 

8.3.2 Key performance indicators 

Factors that are within the control of the organization and critical to its sustained success should be subject to 
performance measurement and identified as key performance indicators (KPIs). The KPIs should be quantifiable 
and should enable the organization to set measurable objectives, identify, monitor and predict trends and take 
corrective, preventive and improvement actions when necessary. Top management should select KPIs as a basis 
for making strategic and tactical decisions. The KPIs should in turn be suitably cascaded as performance 
indicators at relevant functions and levels within the organization to support the achievement of top level 
objectives. 

KPIs should be appropriate to the nature and size of the organization and to its products, processes and 
activities. They need to be consistent with the objectives of the organization, which should, in turn, be consistent 
with its strategy and policies (see 5.2). Specific information relating to risks and opportunities should be 
considered when selecting the KPIs. 

In selecting the KPIs, the organization should ensure that they provide information that is measurable, accurate 
and reliable, and usable to implement corrective actions when performance is not in conformity with objectives or 
to improve process efficiency and effectiveness. Such information should take into account 

— the needs and expectations of customers and other interested parties, 

— the importance of individual products to the organization, both at the present time and in the future, 

— the effectiveness and efficiency of processes, 

— the effective and efficient use of resources, 

— profitability and financial performance, and 

— statutory and regulatory requirements, where applicable. 
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8.3.3 Internal audit 

Internal audits are an effective tool for determining the levels of compliance of the organization's management 
system against given criteria, and provide valuable information for understanding, analysing and continually 
improving the organization's performance. Audits should be conducted by people who are not involved in the 
activity being examined, in order to give an independent view on what is being performed. 

Internal audits should assess the implementation and effectiveness of the management system. They can include 
auditing against more than one management system standard, such as ISO 9001 (quality management) and ISO 
14001 (environmental management), as well as addressing specific requirements relating to customers, products, 
processes or specific issues. 

To be effective, internal audits should be conducted in a consistent manner, by competent personnel, in 
accordance with an audit plan-Internal auditing is an effective tool for identifying problems, risks and 
nonconformities, as well as for monitoring progress in closing previously identified nonconformities (which should 
have been addressed through root cause analysis and the development and implementation of corrective and 
preventive action plans). Verification that the actions taken have been effective can be determined through an 
assessment of the improved ability of the organization to fulfil its objectives. Internal auditing can also be focused 
on the identification of good practices (that can be considered for use in other areas of the organization) as well 
as on improvement opportunities. 

The outputs of internal audits provide a useful source of information for 

— addressing problems and nonconformities. 

— benchmarking, 

— promoting good practices within the organization, and 

— increasing understanding of the interactions between processes. 

The results of internal audits are usually presented in the form of reports containing information on compliance 
against the given criteria, nonconformities, and improvement opportunities. Audit reports are also an essential 
input for management reviews. Top management should establish a process for the review of all internal audit 
reports, to identify trends that can require organization-wide corrective or preventive actions. 

The organization should also take the results of other audits, such as second and third party audits, as feedback 
for corrective and preventive actions. 

NOTE See IS01 901 1 for further guidance on auditing. 

8.3.4 Self-assessment 

Self-assessment is a comprehensive and systematic review of. the organization's activities and its performance in 
relation to its degree of maturity (see Annex A). 

Self-assessment should be used to determine the strengths and weaknesses of the organization in terms of its 
performance as well as its best practices, both at an overall level and at the level of its individual processes. Self- 
assessment can assist the organization to prioritize, plan and implement improvements and/or innovations, where 
necessary. 

The results of self-assessments support 

— continual improvement of the organization's overall performance, 

— progress towards achieving and maintaining sustained success for the organization, 
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— innovation in the organization's processes, products and structure, wlien appropriate, 

— recognition of best practices, and 

— the identification of further opportunities for improvement. 

The results of self-assessments should be communicated to relevant people in the organization. They should be 
used to share understanding about the organization and its future direction. The results should be an input to 
management review. 

NOTE 1 ISO 1 001 4 provides a self-assessment tool directed specifically towards the financial and economic benefits of a 
quality management system for an organization. 

NOTE 2 See Annex A for more information about self-assessment. 
8.3.5 Benchmarking 

Benchmarking is a measurement and analysis methodology that an organization can use to search for the best 
practices inside and outside the organization< with the aim of improving its own performance. Benchmarking can 
be applied to strategies and policies, operations, processes, products and organizational structures. 

a) There are several types of benchmarking, such as 

— internal benchmarking of activities within the organization, 

— competitive benchmarking of performance or processes with competitors, and 

— generic benchmarking; comparing strategies, operations or processes with unrelated organizations. 

b) Successful benchmarking depends on factors such as 

— support by top management (as it involves mutual knowledge interchange between the organization and 
its benchmarking partners), 

— the methodology used to apply benchmarking, 

— estimation of benefits versus costs, and 

— understanding of the characteristics of the subject being investigated, to allow a correct comparison to 
the current situation in the organization. 

c) The organization should establish and maintain a methodology for benchmarking that defines rules for 
items such as 

— the definition of the scope of the subject for benchmarking, 

— the process for choosing benchmarking partner(s), as well as any necessary communications and 
confidentiality policies, 

— the determination of indicators for the characteristics to be compared, and the data collection 
methodology to be used, 

— the collection and analysis of data, 

— the identification of performance gaps and the indication of potential improvement areas, 

— the establishment and monitoring of corresponding improvement plans, and 
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— the inclusion of gatliered experience into the organization's l^nowledge base and learning process (see 
6.7), 

8.4 Analysis 

Top management should analyse information gathered from monitoring the organization's environment, identify 
risks and opportunities, and establish plans to manage them. The organization should monitor and maintain 
relevant information, and analyse potential impacts on its strategy and policies. 

The analysis of the information gathered should enable factual decisions to be made on strategy and policy 
issues such as 

— potential changes in the needs and expectations of interested parties in the long term, 

— those existing products and activities that currently provide the most value for its interested parties, 

— new products. and processes needed to meet the changing needs and expectations of its interested parties, 

— the evolving demands for the organizations' products in the long term, 

— the influence of emerging technologies on the organization, 

— new competences that could be needed, and 

— changes that can be expected in statutory and regulatory requirements, or labour markets and other 
resources, which would affect the organization. 

8.5 Review of information from monitoring, measurement and analysts 

Top management should use a systematic approach to, reviewing available information and for ensuring that the 
information is used for decision making (see 4.2). 

Data can be collected from many sources, such as 

— monitoring of the organization's environment, 

— measurements of the organization's performance, including key performance indicators, 

— assessments of the integrity and validity of the measurement processes, 

— results of interna! audit, self-assessment and benchmarking activities, 

— risk assessment, and 

— feedback from customers and other interested parties. 

The reviews should be used to evaluate the results achieved against applicable objectives. 

Reviews should be performed at planned and periodic intervals, to enable trends to be determined, as well as to 
evaluate the organization's progress towards achieving its objectives. They should also be used to identify 
opportunities for improvement, innovation and learning. Reviews should address the assessment and evaluation 
of improvement activities performed previously, including aspects of adaptability, flexibility and responsiveness in 
relation to the organization's vision and objectives. 

Effective reviews of data can assist in the achievement of planned results. 
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The outputs of reviews can be used for benchmarking internally between activities and processes and to show 
trends over time; they can be used externally against the results achieved by other organizations, in the same 
or other sectors. 

The outputs of reviews can indicate the adequacy of resources provided, and how effectively resources have 
been used in achieving the organization's objectives. 

The outputs of the reviews should be presented in a format that can facilitate the implementation of process 
improvement activities. 



9 Improvement, innovation and learning 

9.1 General 

Depending on the organization's environment, improvement (of its current products, processes, etc.) and 
innovation (to develop new products, processes, etc.) could be necessary for sustained success. 

Learning provides the basis for effective and efficient improvement and innovation. 

Improvement, innovation and learning can be applied to 

— products, 

— processes and their interfaces, 

— organizational structures, 

— management systems, 

— human aspects and culture, 

— infrastructure, work environment and technology, and 

— relations with relevant interested parties. 

Fundamental to effective and efficient improvement, innovation and learning is the ability and enablement of the 
people in the organization to make informed judgments on the basis of data analyses and the incorporation of 
lessons learned. 

9.2 Improvement 

Improvement activities can range from small-step continual improvements at a work place to significant 
improvements of the entire organization. 

The organization should define objectives for the improvement of its products, processes, organizational 
structures and its management system through the analysis of data. 

The improvement processes should follow a structured approach, such as the "Plan-Do-Check-Act" (PDCA) 
methodology. The methodology should be applied, consistently with the process approach, for all processes. 

The organization should ensure that continual improvement becomes established as a part of the 
organizational culture by 

— providing the opportunities for people in the organization to participate in improvement activities, through 
their empowerment, 

— providing the necessary resources. 
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— establishing recognition and reward systems for improvement, and 

— continual improvement of the effectiveness and efficiency of the improvement process itself. 

NOTE For more information about "continual improvement", see the related quality management principle in 
Annex B. 

9.3 innovation 

9.3.1 General 

Changes in the organization's environment could require innovation in order to meet the needs and expectations 
of interested parties. The organization should 

— identify the need for innovation, 

— establish and maintain an effective and efficient innovation process, and 

— provide the related resources. 

9.3.2 Application 

Innovation can be applied to issues at all levels, through changes in 

— technology or product (i.e. innovations that not only respond to the changing needs and expectations of 
customers or other interested parties, but also to anticipate potential changes in the organization's 
environment and product lifecycles), 

— processes (i.e. innovation in the methods for product realization, or innovation to improve process stability 
and reduce variance), 

— the organization (i.e. innovation in its constitution and organizational structures), and 

— the organization's management system (i.e. to ensure that competitive advantage is maintained and new 
opportunities are utilized, when there are emerging changes in the organization's environment). 

9.3.3 Timing 

The timing for the introduction of an innovation is usually a balance between the urgency with which it is needed 
versus the resources that are made available for its development. The organization should use a process that is 
in alignment with its strategy to plan and prioritize innovations. The organization should support the innovation 
initiatives with the resources needed. 

9.3.4 Process 

The establishment, maintenance and management of processes for innovation within the organization can be 
influenced by 

— the urgency of the need for innovation, 

— innovation objectives and their impact on products, processes, and the organizational structures, 

— the organization's commitment to innovation, 

— people's willingness to challenge and change the status quo, and 

— the availability or emergence of new technologies. 
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9.3.5 Risks 

The organization should assess the risks related to planned innovation activities, including giving consideration 
to the potential impact on the organization of changes, and prepare preventive actions to mitigate those risks, 
including contingency plans, where necessary. 

9.4 Learning 

The organization should encourage improvement and innovation through learning. 

For the organization to attain sustained success, it is necessary to adopt "learning as an organization" and 
"learning that integrates the capabilities of individuals with those of the organization". 

a) "Learning as an organization" involves consideration of 

— collecting information from various internal and external events and sources, including success stories 
and failures, and 

— gaining insights through in-depth analyses of the information that has been collected. 

b) "Learning that integrates the capabilities of individuals with those of the organization" is achieved by 
combining the knowledge, thinking patterns, and behaviour patterns of people with the values of the 
organization. This involves consideration of 

— the organization's values, based on its mission, vision and strategies, 

— supporting initiatives in learning, and demonstrating leadership through the behaviour of top 
management, 

— stimulation of networking, connectivity, interactivity and sharing of knowledge both inside and outside 
the organization, 

— maintaining systems for learning and sharing of knowledge, 

— recognizing, supporting and rewarding the improvement of people's competence, through processes 
for learning and sharing of knowledge, and 

— appreciation of creativity, supporting diversity of the opinions of the different people in the 
organization. 

Rapid access to, and use of, such knowledge can enhance the organization's ability to manage and maintain 
its sustained success. 
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Annex A 

(informative) 

Self-assessment tool 



A.1 General 

Self-assessment is a comprehensive and systematic review of an organization's activities and results, 
referenced against a chosen standard. 

Self-assessment can provide an overall view of the performance of an organization and degree of maturity of 
the management system. It can also help to identify areas for improvement and/or innovation and to determine 
priorities for subsequent actions. 

An organization should use self-assessment to identify improvement and innovation opportunities, set priorities 
and establish action plans with the objective of sustained success. The output of self-assessment will show 
strengths and weaknesses, the maturity level of the organization and, if repeated, the organization's progress 
over time. The results of an organization's self-assessment can be a valuable input into management reviews. 
Self-assessment also has the potential to be a learning tool, which can provide an improved vision of the 
organization and promote the involvement of interested parties. 

The self-assessment tool given in this annex is based on the guidance detailed in this International Standard 
and includes separate self-assessment tables for key elements and details. The self-assessment tables can be 
used as given, or can be customized to suit the organization. 

NOTE in contrast to self-assessments, audits are used to determine the extent to which the quality 
management system requirements are fulfilled. Audit findings are used to assess the effectiveness of the 
quality management system and to identify opportunities for improvement. 



A.2 Maturity model 

A mature organization performs effectively and efficiently and achieves sustained success by 

— understanding and satisfying the needs and expectations of interested parties, 

— monitoring changes in the organization's environment, 

— identifying possible areas for improvement and innovation, 

— defining and deploying strategies and policies, 

— setting and deploying relevant objectives, 

— managing its processes and resources, 

— demonstrating confidence in its people, leading to increased motivation, commitment and involvement, 
and 

— establishing mutually beneficial supplier and other partner relationships. 

This self-assessment tool uses five maturity levels, which can be extended to include additional levels or 
otherwise customized as needed. Figure A.1 gives a generic example of how performance criteria can be 
related to the levels of maturity in a tabular format. The organization should review its performance against 
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specified criteria, identify current maturity levels, and determine its strengths and weaknesses. The criteria 
given for the higher levels can assist the organization to understand the issues it needs to consider and to 
help it to determine the improvements needed to reach higher levels of maturity. Tables A.1 to A.7 give 
examples of completed tables, based on this International Standard. 



Key 
element 


Maturity level towards sustained success 


Level 1 


Level 2 


Level 3 


Level 4 


Level 5 


Element 1 


Criteria 1 
Base level 








Criteria 1 
Best practice 


Element 2 


Criteria 2 
Base level 








Criteria 2 
Best practice 


Element 3 


Criteria 3 
Base level 








Criteria 3 
Best practice 



Figure A.1 — Generic model for self-assessment elements and criteria related to maturity levels 



A.3 Self-assessment of key elements 

This self-assessment should be performed periodically by top management to obtain an overview of the 
organization's behaviour and its current performance (see Table A.1). 



A.4 Self-assessment of detailed elements 

This self-assessment is intended to be performed by operational management and process owners to obtain 
an in-depth overview of the organization's behaviour and current performance. 

The elements of this self-assessment are contained in Tables A.2 to A.7 and relate to the clauses of this 
International Standard; however, the organization can define additional or different criteria to fulfil its own 
specific needs. If appropriate, the self-assessment can be limited to any of the tables in isolation. 



A.5 Using thie self-assessment tools 

A step-by-step methodology for an organization to conduct a self-assessment is to: 

a) define the scope of the self-assessment in terms of the parts of the organization to be assessed and the 
type of the assessment, such as 

— a self-assessment of key elements, 

— a self-assessment of detailed elements, based on this International Standard, or 

— a self-assessment of detailed elements based on this International Standard, with additional or new 
criteria or levels. 

b) identify who will be responsible for the self-assessment and when it will be carried out, 

c) determine how the self-assessment will be carried out, either by a team (cross-functional or other 
appropriate team) or by individuals. The appointment of a facilitator can assist the process. 
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d) identify the maturity level for each of the organization's individual processes. This should be 
done by comparing the present situation in the organization to the examples that are listed in 
the tables, and by marking the elements that the organization is already applying; start at level 1 
and progress to the higher maturity levels. The current maturity level will be the highest maturity 
level achieved with no preceding gaps up to that point. 

e) consolidate the results into a report. This provides a record of progress over time and can 
facilitate the communication of information, both internally and externally. The use of graphics in 
such a report can aid the communication of the results (see the example in Figure A.2). 

f) assess the current performance of the organization's processes and identify areas for 
improvement and/or innovation. These opportunities should be identified through the process 
and an action plan developed as a result of the assessment. 

An organization can be at different maturity levels for the different elements. A review of the gaps 
can help top management in planning and prioritizing the improvement and/or innovation activities 
needed to move individual elements to a higher level. 



Achieved 
Goat 



4. Managing for tfw 

sustainttd succass of sn 

organizabon 



9. iimprDvemeni. 
irwwvatiofi a^d laamirtg 



5. Strategy and policy 



B. MonttDfing, 

maasuremsrit. analysis 

and review 



Key 




Achieved 
Goal 



Figure A.2 — Example Illustration of the results of a self-assessment 



A.6 Self-assessment results and Improvement and Innovation planning 

The completion of a self-assessment should result in an action plan for improvement and/or 
innovation that should be used as an input to top management for planning and review, based on 
the elements of this International Standard. 
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The information gained from tlie self-assessment could also be used to 

— stimulate comparisons and share learning throughout the organization (the comparisons can be between the 
organization's processes and, where applicable, between its different units), 

— benchmark with other organizations, 

— monitor progress of the organization over time, by conducting periodic self-assessments, and 

— identify and prioritize areas for improvement. 

During this step, the organization should assign responsibilities for the chosen actions, estimate and provide the 
resources needed, and identify the expected benefits and any perceived risks associated with them. 
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Annex B 
(informative) 

Quality management principles 



B.1 General 

This annex describes tine eiglit quality management principles which form the basis for the quality 
management standards prepared by ISO/TC176. These principles can be used by top management as a 
framework to guide their organizations towards improved performance. 

This annex gives the standardized descriptions of the principles. In addition, it provides examples of the 
benefits derived from their use and of actions that managers typically take in applying the principles to 
improve their organizations' performance. 

B.2 Principle 1 : Customer focus 

Organizations depend on their customers and therefore should understand current and future customer 
needs, should meet customer requirements and strive to exceed customer expectations. 

a) Key benefits 

— increased revenue and market share obtained through flexible and fast responses to market 
opportunities, 

— increased effectiveness in the use of the organization's resources to enhance customer 
satisfaction, 

— improved customer loyalty leading to repeat business. 

b) Applying the principle of customer focus typically leads to 

— researching and understanding customer needs and expectations, 

— ensuring that the objectives of the organization are linked to customer needs and expectations, 

— communicating customer needs and expectations throughout the organization, 

— measuring customer satisfaction and acting on the results, 

— systematically managing customer relationships, 

— ensuring a balanced approach between satisfying customers and other interested parties (such 
as owners, employees, suppliers, financiers, local communities and society as a whole). 
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B.3 Principle 2: Leadershiip 

Leaders establish unity of purpose and direction of tlie organization. Tliey sfiould create and maintain the internal 
environment in which people can become fully involved in achieving the organizations objectives. 

a) Key benefits 

— people will understand and be motivated towards the organization's goals and objectives, 

— activities are evaluated, aligned and implemented in a unified way, 

— miscommunication between levels of an organization will be minimized. 

b) Applying the principle of leadership typically leads to 

— considering the needs of ail interested parties including customers, owners, employees, suppliers, 
financiers, local communities and society as a whole, 

— establishing a clear vision of the organization's future, 

— setting challenging goals and targets, 

— creating and sustaining shared values, fairness and ethical role models at all levels of the organization, 

— establishing trust and eliminating fear, 

— providing people with the required resources, training and freedom to act with responsibility and 
accountability, 

— inspiring, encouraging and recognizing people's contributions. 

B.4 Principie 3: Invoivement of peopie 

People at all levels are the essence of an organization and their full involvement enables their abilities to be used for 
the organization's benefit. 

a) Key benefits 

— motivated, committed and involved people within the organization, 

— innovation and creativity in furthering the organization's objectives, 

— people being accountable for their own performance, 

— people eager to participate in and contribute to continual improvement. 

b) Applying the principle of involvement of people typically leads to 

— people understanding the importance of their contribution and role in the organization, 

— people identifying constraints to their performance, 

— people accepting ownership of problems and their responsibility for solving them, 

— people evaluating their performance against their personal goals and objectives. 
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— people actively seeking opportunities to enhance their competence, knowledge and experience, 

— people freely sharing knowledge and experience, 

— people openly discussing problems and issues. 

B.5 Principle 4: Process approacli 

A desired result is achieved more efficiently when activities and related resources are managed as a process. 

a) Key benefits 

— lower costs and shorter cycle times through effective use of resources, 

— improved, consistent and predictable results, 

— focused and prioritized improvement opportunities. 

b) Applying the principle of process approach typically leads to 

— systematically defining the activities necessary to obtain a desired result, 

— establishing clear responsibility and accountability for managing key activities, 

— analysing and measuring of the capability of key activities, 

— identifying the interfaces of key activities within and between the functions of the organization, 

— focusing on the factors, such as resources, methods, and materials, that will improve key activities of the 
organization, 

— evaluating risks, consequences and impacts of activities on customers, suppliers and other 
interested parties. 

B.6 Principle 5: System approachi to management 

Identifying, understanding and managing interrelated processes as a system contributes to the organization's 
effectiveness and efficiency in achieving its objectives. 

a) Key benefits 

— integration and alignment of the processes that will best achieve the desired results, 

— ability to focus effort on the key processes. 

— providing confidence to interested parties as to the consistency, effectiveness and efficiency of the 
organization, 

b) Applying the principle of system approach to management typically leads to 

— structuring a system to achieve the organization's objectives in the most effective and efficient way, 

— understanding the interdependencies between the processes of the system, 

— structured approaches that harmonize and integrate processes, 
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— providing a better understanding of tlie roles and responsibilities necessary for achieving common objectives 
and thereby reducing cross-functional barriers, 

— understanding organizational capabilities and establishing resource constraints prior to action, 

— targeting and defining how specific activities within a system should operate, 

— continually improving the system through measurement and evaluation. 

B.7 Principle 6: Continual improvement 

Continual improvement of the organization's overall performance should be a permanent objective of the 
organization. 

a) Key benefits 

— performance advantage through improved organizational capabilities, 

— alignment of improvement activities at all levels to an organization's strategic intent, 

— flexibility to react quickly to opportunities. 

b) Applying the principle of continual improvement typically leads to 

— employing a consistent organization-wide approach to continual improvement of the organization's 
performance, 

— providing people with training in the methods and tools of continual improvement, 

— making continual improvement of products, processes and systems an objective for every individual in the 
organization, 

— establishing goals to guide, and measures to track, continual improvement, 

— recognizing and acknowledging improvements. 

B.8 Principle 7: Factual approach to decision making 

Effective decisions are based on the analysis of data and information. 

a) Key benefits 

— informed decisions, 

— an increased ability to demonstrate the effectiveness of past decisions through reference to factual records, 

— increased ability to review, challenge and change opinions and decisions. 

b) Applying the principle of factual approach to decision making typically leads to 

— ensuring that data and information are sufficiently accurate and reliable, 

— making data accessible to those who need it. 
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— analysing data and information using valid methods. 

— making decisions and taking action based on factual analysis, balanced with experience and intuition. 

B.9 Principle 8: Mutuaiiy beneficiai supplier reiationshiips 

An organization and its suppliers are interdependent and a mutually beneficial relationship enhances the ability of 
both to create value. 

a) Key benefits 

— increased ability to create value for both parties, 

— flexibility and speed of joint responses to changing market or customer needs and expectations. 

— optimization of costs and resources. 

b) Applying the principle of mutually beneficial supplier relationships typically leads to 

— establishing relationships that balance short-term gains with long-term considerations, 

— pooling of expertise and resources with partners, 

— identifying and selecting key suppliers, 

— clear and open communication, 

— sharing information and future plans, 

— establishing joint development and improvement activities, 

— inspiring, encouraging and recognizing improvements and achievements by suppliers. 
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Annex C 

(informative) 

Correspondence between ISO 9004:2009 and ISO 9001 :2008 



Table C.1 gives the correspondence between ISO 9001:2008 and this International Standard, and shows how the 
two International Standards complement each other. 

ISO 9001 specifies requirements for a quality management system that can be used for internal application by 
organizations, or for certification, or for contractual purposes and focuses on the effectiveness of the quality 
management system in meeting the customer requirements. 

This International Standard gives guidance for organizations whose top management wish to move beyond the 
requirements of ISO 9001, to address the needs and expectations of all interested parties and their satisfaction, by 
systematic and continual improvement of the organization's performance. 

Table C.1 —Correspondence between ISO 9004:2009 and ISO 9001 :2008 



Subclause in ISO 9004:2009 


Subclause in ISO 9001 :2008 


4.1 {Managing for the sustained success of an 
organization) General 


4.1 (Quality management system) General requirements 
5.1 Management commitment 


— 


4.2 Documentation requirements 


4.2 Sustained success 


— 


4.3 The organization's environment 


7.2 Customer related processes 


4.4 Interested parties, needs and expectations 


5.2 Customer focus 


5.1 (Strategy and policy) General 


5.3 Quality policy 


5.2 Strategy and policy formulation 


5.3 Quality policy 


5.3 Strategy and policy deployment 


5.4 Planning 


5.4 Strategy and policy communication 


5.5.3 Internal communication 
7.2.3 Customer communication 


6.1 (Resource management) General 


6.1 Provision of resources 


6.2 Financial resources 


— 


6.3 People in the organization 
6.3.1 Management of people 


6.2 Human resources 


6.3.2 Competence of people 


6.2.2 Competence, training and awareness 


6.3.3 Involvement and motivation of people 


— 


6.4 Suppliers and partners 
6.4.1 General 


7.4.1 Purchasing process 


6.4.2 Selection, evaluation and improvement of the 
capabilities of suppliers and partners 


7.4.1 Purchasing process 


6.5 Infrastructure 


6.3 Infrastructure 


6.6 Work environment 


6.4 Work environment 
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Table C.I {continued) 



Subclause in ISO 9004:2009 


Subclause In ISO 9001:2008 


6.7 Knowledge, information and technology 


— 


6.8 Natural resources 


_ 


7 1 (Processes management) General 


4.1 (Quality management system) General requirements 


7 2 Process planning and control 


7.1 Planning of product realization 
7.5 Production and service provision 


7.3 Process responsibility and authority 


5 5,1 Responsibility, authority and communication 


8.1 (Monitoring, measurement, analysis and review) 
General 


8.1 General 

7.6 Control of monitoring and measuring equipment 


8.2 Monitonng 


8 2 3 Monitoring and measurement of processes 
8-2-4 Monitoring and measurement of product 


8.3.1 (Measurement) General 


8,2 Monitoring and measurement 
82 1 Customer satisfaction 


8.3.2 Key performance indicators 


8.2.3 Monitoring and measurement of processes 


8.3.3 Internal audit 


8.2.2 internal audit 


8 3.4 Self-assessment 


— 


8 3 5 Benchmarking 


— 


8.4 Analysis • 


8.4 Analysis of data 


8 5 Review of information from monitorlng.and 
measurement and analysts 


5,6 Management review 


9 1 (improvement, innovation and learning) General 


8.5 Improvement 


9 2 Improvement 


8 5 Improvement 


9,3 innovation 


7.3 Design and development 


9 4 Learning 


— 
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